Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wIes10J-cnxbaPkh6ExeOqAoYWo.roa
File: wIes10J-cnxbaPkh6ExeOqAoYWo.roa (raw, json)
Hash identifier: qgogLOEinSKj9Mn4XYX/kfC7jDKNb0IrX8ua3Qw5TyE=
Subject key identifier: C0:87:AC:D7:42:7E:72:7C:5B:68:F9:21:E8:4C:5E:3A:A0:28:61:6A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A063C7008E4A252C602E15AAE7894ACF1D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wIes10J-cnxbaPkh6ExeOqAoYWo.roa
Signing time: Wed 02 Sep 2026 20:19:41 +0000
ROA not before: Wed 02 Sep 2026 20:19:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218965
IP address blocks: 87.85.164.0/24 maxlen: 24
212.135.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:c7:00:8e:4a:25:2c:60:2e:15:aa:e7:89:4a:cf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 2 20:19:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c087acd7427e727c5b68f921e84c5e3aa028616a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:d2:e0:0b:72:76:9e:15:14:f7:a2:7b:80:
d6:22:d2:ff:b8:4a:92:2b:6c:de:54:9b:d9:03:36:
c3:b1:3f:fc:68:58:e4:45:02:14:68:b0:aa:f7:79:
79:fb:b1:29:07:a0:da:59:dd:f4:b5:70:c6:a2:64:
9d:2d:55:43:50:c5:54:da:12:ad:47:7b:0c:f9:b5:
98:b1:87:ef:f0:e6:b3:8d:f5:34:68:f0:ff:52:d9:
7b:31:89:3a:2c:b9:f3:13:cd:1b:86:c5:49:70:7d:
d2:07:b2:26:b0:9e:c0:9b:66:ff:1e:4f:8e:c2:f0:
b4:98:6b:62:d7:15:1a:e3:96:d4:d3:bb:89:90:a4:
7a:d0:ac:0e:96:b8:bc:78:ba:85:4c:ca:56:a1:f5:
e2:bd:cc:ad:fb:34:02:e6:7b:ae:9d:e2:e5:7b:11:
90:98:58:f6:60:c8:78:e0:42:a8:b2:b4:28:c0:5c:
74:84:fa:a6:73:2a:04:b1:7d:ee:be:65:94:e1:8d:
f7:ca:d0:bc:6d:90:40:ce:33:54:42:aa:8d:e7:e0:
86:b4:de:74:36:3e:3d:ec:46:95:e0:3d:66:a7:18:
a6:22:f8:f5:9d:ac:01:ba:de:6f:34:a5:92:a7:91:
be:c2:a2:7a:6a:c3:48:29:76:be:3f:1b:2b:d5:37:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:87:AC:D7:42:7E:72:7C:5B:68:F9:21:E8:4C:5E:3A:A0:28:61:6A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wIes10J-cnxbaPkh6ExeOqAoYWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.164.0/24
212.135.23.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:6d:94:fd:b2:0d:0c:b3:87:1e:f1:60:ef:69:45:ec:28:52:
4c:ed:5c:ad:95:da:6a:cc:f8:a8:bd:89:9f:ab:95:7f:e1:2b:
b0:d1:92:c1:c3:b9:89:c9:dc:4b:6c:32:26:22:61:45:9d:b8:
50:d2:dd:07:37:1d:47:71:46:ba:b0:2f:e6:b0:66:46:ca:f7:
64:8f:19:ee:24:fe:83:1e:d9:8c:29:6f:5e:a0:33:2c:de:af:
b0:e3:c5:d4:ea:0f:42:83:25:49:73:ef:1e:d4:04:84:68:62:
fd:2c:1b:9d:ac:36:35:23:ee:65:08:b7:f7:a5:82:d5:ba:de:
1e:50:dd:c0:25:25:94:80:ab:cb:01:a5:25:b3:f5:fe:bf:bd:
75:c7:03:2e:7a:44:47:a2:c6:48:49:53:7b:a3:62:b1:dc:e7:
a4:f8:0a:a8:e0:19:63:de:5f:20:8d:69:48:cb:7f:6a:74:c5:
75:91:42:12:14:ab:5d:6f:14:cc:6a:76:e6:f9:64:66:c2:f5:
5e:0e:83:65:29:20:6e:6d:81:e3:23:c6:c3:7f:5f:f7:30:1e:
d4:88:f2:06:6d:47:4d:48:96:35:77:1d:2c:80:be:0b:ff:00:
9d:a1:03:69:0d:df:99:03:13:f5:8b:03:ec:37:38:33:b7:8d:
0d:6c:b5:e4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBjxwCOSiUsYC4VqueJSs8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTAyMjAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDg3YWNkNzQyN2U3MjdjNWI2OGY5MjFlODRjNWUzYWEwMjg2MTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotDS4Atydp4VFPeie4DWItL/uEqS
K2zeVJvZAzbDsT/8aFjkRQIUaLCq93l5+7EpB6DaWd30tXDGomSdLVVDUMVU2hKt
R3sM+bWYsYfv8OazjfU0aPD/Utl7MYk6LLnzE80bhsVJcH3SB7ImsJ7Am2b/Hk+O
wvC0mGti1xUa45bU07uJkKR60KwOlri8eLqFTMpWofXivcyt+zQC5nuuneLlexGQ
mFj2YMh44EKosrQowFx0hPqmcyoEsX3uvmWU4Y33ytC8bZBAzjNUQqqN5+CGtN50
Nj497EaV4D1mpximIvj1nawBut5vNKWSp5G+wqJ6asNIKXa+Pxsr1TdyXwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMCHrNdCfnJ8W2j5IehMXjqgKGFqMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvd0llczEwSi1jbnhiYVBraDZFeGVPcUFvWVdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV1WkAwQA
1IcXMA0GCSqGSIb3DQEBCwUAA4IBAQDZbZT9sg0Ms4ce8WDvaUXsKFJM7Vytldpq
zPiovYmfq5V/4Suw0ZLBw7mJydxLbDImImFFnbhQ0t0HNx1HcUa6sC/msGZGyvdk
jxnuJP6DHtmMKW9eoDMs3q+w48XU6g9CgyVJc+8e1ASEaGL9LBudrDY1I+5lCLf3
pYLVut4eUN3AJSWUgKvLAaUls/X+v711xwMuekRHosZISVN7o2Kx3Oek+Aqo4Blj
3l8gjWlIy39qdMV1kUISFKtdbxTManbm+WRmwvVeDoNlKSBubYHjI8bDf1/3MB7U
iPIGbUdNSJY1dx0sgL4L/wCdoQNpDd+ZAxP1iwPsNzgzt40NbLXk
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:33 2026 by rpki-client